diff --git a/src/dcc-update-plugin/CMakeLists.txt b/src/dcc-update-plugin/CMakeLists.txt
index 007a1163c..e96e4eee2 100644
--- a/src/dcc-update-plugin/CMakeLists.txt
+++ b/src/dcc-update-plugin/CMakeLists.txt
@@ -1,4 +1,4 @@
-# SPDX-FileCopyrightText: 2025 UnionTech Software Technology Co., Ltd.
+# SPDX-FileCopyrightText: 2025 - 2026 UnionTech Software Technology Co., Ltd.
 #
 # SPDX-License-Identifier: CC0-1.0
 
@@ -55,5 +55,10 @@ target_link_libraries(${Update_Name} PRIVATE
 )
 
 install(FILES "misc/org.deepin.dde.control-center.update.json" DESTINATION share/dsg/configs/org.deepin.dde.control-center)
+
+# security loader permission interfaces config
+install(FILES "misc/permission-interfaces/org.deepin.dcc-update-ui.json"
+    DESTINATION share/dde-control-center/permission-interfaces)
+
 dcc_install_plugin(NAME ${Update_Name} TARGET ${Update_Name})
 dcc_handle_plugin_translation(NAME ${Update_Name} )
diff --git a/src/dcc-update-plugin/misc/permission-interfaces/org.deepin.dcc-update-ui.json b/src/dcc-update-plugin/misc/permission-interfaces/org.deepin.dcc-update-ui.json
new file mode 100644
index 000000000..17ecbeb9b
--- /dev/null
+++ b/src/dcc-update-plugin/misc/permission-interfaces/org.deepin.dcc-update-ui.json
@@ -0,0 +1,11 @@
+{
+    "version": "1.0",
+    "description": "更新插件需要授权的 D-Bus 系统服务接口",
+    "DestList": [
+        {
+            "DbusName": "org.deepin.dde.Lastore1",
+            "DbusPath": "/org/deepin/dde/Lastore1",
+            "DbusInterface": "org.deepin.dde.Lastore1.Manager"
+        }
+    ]
+}